On Tue, 17 Mar 2009 21:17:29 +0100, andrel wrote:

> Some
> indication may be in how long it takes to get the system running again,
> if that is more than a few days, the owner was probably innocent.

That's not a very good indication; reinstalling an OS is easy.  Suppose 
the system were being used to do cancer research; that could be years of 
work lost.  Of course if it were, they'd *better* be running backups, too.

Jim

Post a reply to this message